$ rpki-client -vvf rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft File: 2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft (raw, json) Hash identifier: uZC/CoWQd4E6smM+LQvahl9ERei+9zqiy4A+PLhLYIs= Subject key identifier: 5C:32:47:92:9C:B3:26:B7:2B:EB:91:33:29:70:F2:AE:F0:86:D8:A1 Authority key identifier: D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E Certificate issuer: /CN=A919C19A/serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E Certificate serial: 0489 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft Manifest number: 047B Signing time: Mon 21 Jul 2025 00:18:58 +0000 Manifest this update: Mon 21 Jul 2025 00:18:58 +0000 Manifest next update: Mon 28 Jul 2025 00:18:58 +0000 Files and hashes: 1: 2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl (hash: dUoaMW/DIKOKg69mjGW4qaqL84eb9jEnU5yBEHk65zw=) 2: F943257E12F511EDA9E7C939C4F9AE02.roa (hash: My/AnfHzuVQXYQgSRRC6SAXx84s6nLjdhtAzMmqyjDg=) 3: 4CC86698C4FA11EE86A51C0EC4F9AE02.roa (hash: 1L1EbJoORDKgeElorwmyrU76/atwwCYpeCr4PPGihVE=) 4: D9A7B280C4FA11EEA3AF2932C4F9AE02.roa (hash: D+FMpyZsISfccSz7KiOlQqTZgWE7m1EZKNLzF9fgEyY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 00:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1161 (0x489) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C19A, serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E Validity Not Before: Jul 21 00:18:58 2025 GMT Not After : Jul 28 00:18:58 2025 GMT Subject: CN=687d8772-2094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3a:51:cb:ea:70:a4:81:f5:5b:91:e5:34:2f: 72:1e:f0:d2:32:6d:0f:05:c4:29:89:fb:a6:9a:01: b1:2b:42:66:7c:ec:ca:6e:c8:42:9a:e2:f4:15:01: 00:f0:f7:61:1f:cb:c8:89:95:ae:f6:94:fa:58:76: 99:85:d3:f8:93:9a:e2:93:46:11:12:73:dd:a4:cf: c2:ab:b0:09:bf:1e:4a:c9:34:1e:a6:88:e6:c9:33: 44:5c:95:35:b0:3b:8f:61:b8:3d:dd:48:df:7a:6b: 2c:81:4a:fe:61:3f:79:1d:b8:ef:54:82:ac:54:87: ec:b8:4e:21:db:ab:3d:97:cb:09:04:b7:77:98:4f: 45:52:9d:0a:2a:e9:b6:76:f6:1c:be:41:14:88:ea: ab:b4:a4:f8:65:6d:ad:74:5f:2d:84:5a:64:36:2c: 34:bd:95:bc:a9:a2:11:d6:04:f5:31:b3:7a:66:61: 0d:05:fd:c1:70:04:b1:1b:55:d6:e3:b2:6e:11:40: 04:c2:38:e9:c7:b7:42:51:67:23:5f:59:81:28:f5: d4:ab:af:fb:f3:e2:e5:93:7b:42:4c:b0:60:c3:cb: 44:d3:15:73:5d:b7:19:5e:f2:66:cd:f5:96:58:b4: 55:3f:78:6c:17:0b:56:df:b3:8a:f9:32:60:3c:a2: 62:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:32:47:92:9C:B3:26:B7:2B:EB:91:33:29:70:F2:AE:F0:86:D8:A1 X509v3 Authority Key Identifier: keyid:D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:95:a5:48:1f:4e:f0:dd:18:c3:ca:cb:b5:e6:36:b3:59:2c: df:89:4b:fe:bc:e2:51:ff:14:59:0e:49:8a:b8:f2:52:9d:e6: 3a:fa:25:4b:55:ac:71:1d:2e:a0:ba:e2:3f:de:15:a8:85:2c: 09:0f:b8:60:4d:7c:4f:1e:b5:c6:3a:48:b6:7f:49:ed:58:aa: d2:66:71:1c:39:fc:ec:8b:7b:f6:0a:f7:1c:40:3c:50:d1:cd: 6e:31:2f:1b:46:86:0a:67:f6:17:03:8e:24:95:b9:d7:a6:2f: 5a:cd:8f:c2:c7:1e:45:c9:86:86:de:b3:8e:40:4b:c9:6a:32: 2e:17:09:7e:31:37:77:8d:d1:d9:6f:73:e4:1c:07:b0:51:07: d1:5d:5d:5f:0a:a0:57:99:37:92:76:39:5b:b0:0c:89:4d:4d: 18:39:6d:41:f9:09:42:21:df:bf:9c:6d:1c:c4:a1:67:c1:c0: 47:71:a4:c4:21:32:3b:28:3b:97:6a:5e:b3:73:5c:c9:ce:ad: 80:33:82:cd:53:3e:bb:be:ce:db:cd:8b:f3:54:d0:cd:c5:81: dc:bb:7a:eb:cc:a5:d9:f3:f8:66:57:e0:cb:c7:72:ea:f8:88: e6:c1:bd:49:c4:54:cf:13:c6:fe:90:b2:2c:33:16:a0:e3:76: 40:b3:53:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMxOUExMTAvBgNVBAUTKEQ4OUNGRjZEN0Q5NTUxQUU3MDREOTNFOTc1NTM2MTZD OERCMTNGNUUwHhcNMjUwNzIxMDAxODU4WhcNMjUwNzI4MDAxODU4WjAYMRYwFAYD VQQDEw02ODdkODc3Mi0yMDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzpRy+pwpIH1W5HlNC9yHvDSMm0PBcQpifummgGxK0JmfOzKbshCmuL0FQEA 8PdhH8vIiZWu9pT6WHaZhdP4k5rik0YREnPdpM/Cq7AJvx5KyTQepojmyTNEXJU1 sDuPYbg93UjfemssgUr+YT95HbjvVIKsVIfsuE4h26s9l8sJBLd3mE9FUp0KKum2 dvYcvkEUiOqrtKT4ZW2tdF8thFpkNiw0vZW8qaIR1gT1MbN6ZmENBf3BcASxG1XW 47JuEUAEwjjpx7dCUWcjX1mBKPXUq6/78+Llk3tCTLBgw8tE0xVzXbcZXvJmzfWW WLRVP3hsFwtW37OK+TJgPKJiZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFwyR5Kc sya3K+uRMylw8q7whtihMB8GA1UdIwQYMBaAFNic/219lVGucE2T6XVTYWyNsT9e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzE5QS8yNEFCMkMzRTRG OEQxMUVDODE1NzEyNUZDNEY5QUUwMi8ySnpfYlgyVlVhNXdUWlBwZFZOaGJJMnhQ MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJKel9iWDJWVWE1d1RaUHBkVk5oYkkyeFAxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzE5QS8yNEFCMkMzRTRGOEQxMUVDODE1NzEyNUZDNEY5QUUwMi8ySnpfYlgyVlVh NXdUWlBwZFZOaGJJMnhQMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOlaVIH07w3RjDysu15jazWSzfiUv+vOJR/xRZDkmKuPJSneY6+iVL VaxxHS6guuI/3hWohSwJD7hgTXxPHrXGOki2f0ntWKrSZnEcOfzsi3v2CvccQDxQ 0c1uMS8bRoYKZ/YXA44klbnXpi9azY/Cxx5FyYaG3rOOQEvJajIuFwl+MTd3jdHZ b3PkHAewUQfRXV1fCqBXmTeSdjlbsAyJTU0YOW1B+QlCId+/nG0cxKFnwcBHcaTE ITI7KDuXal6zc1zJzq2AM4LNUz67vs7bzYvzVNDNxYHcu3rrzKXZ8/hmV+DLx3Lq +Ijmwb1JxFTPE8b+kLIsMxag43ZAs1NJ -----END CERTIFICATE-----Generated at Tue Jul 22 12:05:33 2025 by rpki-client